Technology & Security Risk Auditor

What you'll do

• Execute risk-based audits covering information technology, security, business operations, and financial compliance.
• Evaluate IT infrastructure, software development lifecycles, and disaster recovery planning across on-premise and cloud environments.
• Assess information security risks including vulnerability management, penetration testing, and incident response protocols.
• Perform controls testing throughout the audit lifecycle, including risk assessment, fieldwork, data analysis, and remediation validation.
• Identify root causes for audit exceptions and recommend practical solutions to strengthen business processes.
• Document audit work papers in a consistent, high-quality manner while meeting established project timelines.
• Build relationships with management to communicate findings and improve internal controls across the organization.

What we're looking for

• Must have 1+ years of relevant audit and/or risk management experience.
• Must possess a Bachelor’s degree in Auditing, Business Management, or Information Technology.
• Knowledge of auditing principles, practices, and the analysis and reporting of audit information is required.
• Familiarity with internal control frameworks such as COBIT, FFIEC, PCI DSS, Sarbanes-Oxley, ISO27001, and ITIL.
• Merchant Acquiring, Payment Processing, Card Issuance, and Private-label Consumer Solutions industry experience (preferred).
• CIA, CISA, CISM, CISSP, or other relevant certifications (preferred).
• Professional services audit or risk advisory experience (preferred).